InstaWP kayıtları
instawp üreticisine ait 13 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %53,8
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-862 Missing Authorization3
- CWE-502 Deserialization of Untrusted Data2
- CWE-434 Unrestricted Upload of File with Dangerous Type2
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
- CWE-201 Insertion of Sensitive Information Into Sent Data1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
13 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
41Planlayın | CVE-2024-2667Kavram kanıtı | InstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.22 - Unauthenticated Arbitrary File Uploadinstawp · instawp connect · CWE-434 | Kritik9,8 | — | %5,8 | 2 May 2024 |
40Planlayın | CVE-2024-4898Kavram kanıtı | InstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.38 - Missing Authorization to Unauthenticated API setup/Arbitrary Options Update/Administrative User Cinstawp · instawp connect · CWE-862 | Kritik9,8 | — | %4,2 | 12 Haz 2024 |
39İzleyin | CVE-2023-3956İstismar yok | InstaWP Connect <= 0.0.9.18 - Missing Authorization to Unauthenticated Post/Taxonomy/User Add/Change/Delete, Customizer Setting Change, Plugin Installation/Actiinstawp · instawp connect · CWE-862 | Kritik9,8 | — | %1,0 | 27 Tem 2023 |
39İzleyin | CVE-2024-6397İstismar yok | InstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.44 - Authentication Bypass to Admininstawp · instawp connect · CWE-288 | Kritik9,8 | — | %0,7 | 11 Tem 2024 |
39İzleyin | CVE-2024-37228İstismar yok | WordPress InstaWP Connect plugin <= 0.1.0.38 - Arbitrary File Upload vulnerabilityinstawp · instawp connect · CWE-434 | Kritik9,8 | — | %0,5 | 24 Haz 2024 |
36İzleyin | CVE-2022-2434İstismar yok | String Locator <= 2.5.0 - Cross-Site Request Forgery to PHAR Deserializationinstawp · string locator · CWE-502 | Yüksek8,8 | — | %1,7 | 6 Eyl 2022 |
35İzleyin | CVE-2024-10936İstismar yok | String Locator <= 2.6.6 - Unauthenticated PHP Object Injectioninstawp · string locator · CWE-502 | Yüksek8,8 | — | %1,1 | 21 Oca 2025 |
35İzleyin | CVE-2024-22145Kavram kanıtı | WordPress InstaWP Connect plugin <= 0.1.0.8 - Arbitrary Option Update to Privilege Escalation vulnerabilityinstawp · instawp connect · CWE-266 | Yüksek8,8 | — | %1,1 | 17 May 2024 |
35İzleyin | CVE-2024-25918İstismar yok | WordPress InstaWP Connect plugin <= 0.1.0.8 - Remote Code Execution vulnerabilityinstawp · instawp connect · CWE-94 | Yüksek8,8 | — | %0,7 | 3 Nis 2024 |
35İzleyin | CVE-2024-23507İstismar yok | WordPress InstaWP Connect plugin <= 0.1.0.9 - SQL Injection vulnerabilityinstawp · instawp connect · CWE-89 | Yüksek8,8 | — | %0,6 | 31 Oca 2024 |
35İzleyin | CVE-2024-32701İstismar yok | WordPress InstaWP Connect plugin <= 0.1.0.24 - Broken Access Control vulnerabilityinstawp · instawp connect · CWE-862 | Yüksek8,8 | — | %0,3 | 9 Haz 2024 |
26İzleyin | CVE-2024-23506İstismar yok | WordPress InstaWP Connect plugin <= 0.1.0.9 - Sensitive Data Exposure vulnerabilityinstawp · instawp connect · CWE-201 | Orta6,5 | — | %0,5 | 26 Oca 2024 |
24İzleyin | CVE-2023-6987İstismar yok | String Locator <= 2.6.5 - Reflected Cross-Site Scriptinginstawp · string locator · CWE-79 | Orta6,1 | — | %0,3 | 23 Ağu 2024 |
- CVE-2024-266741Planlayın
InstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.22 - Unauthenticated Arbitrary File Upload
KritikCVSS 9,8Kavram kanıtıEPSS %6instawp · instawp connect2 May 2024
- CVE-2024-489840Planlayın
InstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.38 - Missing Authorization to Unauthenticated API setup/Arbitrary Options Update/Administrative User C
KritikCVSS 9,8Kavram kanıtıEPSS %4instawp · instawp connect12 Haz 2024
- CVE-2023-395639İzleyin
InstaWP Connect <= 0.0.9.18 - Missing Authorization to Unauthenticated Post/Taxonomy/User Add/Change/Delete, Customizer Setting Change, Plugin Installation/Acti
KritikCVSS 9,8İstismar yokEPSS %1instawp · instawp connect27 Tem 2023
- CVE-2024-639739İzleyin
InstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.44 - Authentication Bypass to Admin
KritikCVSS 9,8İstismar yokEPSS %1instawp · instawp connect11 Tem 2024
- CVE-2024-3722839İzleyin
WordPress InstaWP Connect plugin <= 0.1.0.38 - Arbitrary File Upload vulnerability
KritikCVSS 9,8İstismar yokEPSS %1instawp · instawp connect24 Haz 2024
- CVE-2022-243436İzleyin
String Locator <= 2.5.0 - Cross-Site Request Forgery to PHAR Deserialization
YüksekCVSS 8,8İstismar yokEPSS %2instawp · string locator6 Eyl 2022
- CVE-2024-1093635İzleyin
String Locator <= 2.6.6 - Unauthenticated PHP Object Injection
YüksekCVSS 8,8İstismar yokEPSS %1instawp · string locator21 Oca 2025
- CVE-2024-2214535İzleyin
WordPress InstaWP Connect plugin <= 0.1.0.8 - Arbitrary Option Update to Privilege Escalation vulnerability
YüksekCVSS 8,8Kavram kanıtıEPSS %1instawp · instawp connect17 May 2024
- CVE-2024-2591835İzleyin
WordPress InstaWP Connect plugin <= 0.1.0.8 - Remote Code Execution vulnerability
YüksekCVSS 8,8İstismar yokEPSS %1instawp · instawp connect3 Nis 2024
- CVE-2024-2350735İzleyin
WordPress InstaWP Connect plugin <= 0.1.0.9 - SQL Injection vulnerability
YüksekCVSS 8,8İstismar yokEPSS %1instawp · instawp connect31 Oca 2024
- CVE-2024-3270135İzleyin
WordPress InstaWP Connect plugin <= 0.1.0.24 - Broken Access Control vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0instawp · instawp connect9 Haz 2024
- CVE-2024-2350626İzleyin
WordPress InstaWP Connect plugin <= 0.1.0.9 - Sensitive Data Exposure vulnerability
OrtaCVSS 6,5İstismar yokEPSS %1instawp · instawp connect26 Oca 2024
- CVE-2023-698724İzleyin
String Locator <= 2.6.5 - Reflected Cross-Site Scripting
OrtaCVSS 6,1İstismar yokEPSS %0instawp · string locator23 Ağu 2024